Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/EAoNPZ8TpgdLFjCSj501GJeuEXI.roa
File: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (raw, json)
Hash identifier: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=
Subject key identifier: 10:0A:0D:3D:9F:13:A6:07:4B:16:30:92:8F:9D:35:18:97:AE:11:72
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019420685842E0EF106258E61854A732AA19
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/EAoNPZ8TpgdLFjCSj501GJeuEXI.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199156
IP address blocks: 81.171.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:58:42:e0:ef:10:62:58:e6:18:54:a7:32:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=100a0d3d9f13a6074b1630928f9d351897ae1172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:6a:1c:97:53:47:7b:79:b4:19:ce:5b:b4:
d8:73:cf:5b:a2:1d:40:4a:a0:92:37:23:02:1c:e8:
00:6a:7e:48:3b:bd:6c:0a:ec:c6:33:56:5d:25:02:
93:aa:2f:b2:af:cb:a0:bf:b9:c0:e9:f6:00:1b:72:
df:6f:cd:46:da:bc:35:4c:52:6f:e1:cb:c7:9c:1a:
81:9a:55:c9:68:a8:bb:fb:3b:9b:18:ee:83:a6:a9:
65:5d:2d:cf:e5:3c:f0:c3:67:49:4c:3b:81:30:7b:
47:6d:16:ab:ef:0e:8f:b8:dc:02:15:89:0b:0e:0e:
e0:3e:53:0d:7d:e0:80:2b:5f:35:f9:09:d2:41:2e:
d5:e6:df:7b:89:85:a7:f5:ed:34:c8:79:5d:80:36:
12:9a:fe:d5:1d:3b:58:09:3c:37:73:c5:1a:81:35:
79:5b:56:b2:e2:3f:aa:0a:a9:44:b8:83:d4:e3:42:
10:cc:49:0d:93:c0:ee:53:95:90:8c:91:ae:38:c7:
a5:2f:cc:3e:35:26:5a:be:27:db:4d:b3:4f:50:28:
b1:fb:d2:35:4e:02:38:c2:b0:ed:6f:50:e7:55:ce:
5e:9f:0e:4c:18:9f:f0:23:fb:9e:18:3a:ea:59:af:
f6:e5:d8:d7:4c:6d:aa:4a:17:29:39:1c:5b:4d:06:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:0D:3D:9F:13:A6:07:4B:16:30:92:8F:9D:35:18:97:AE:11:72
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/EAoNPZ8TpgdLFjCSj501GJeuEXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.123.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a1:cb:49:c4:3a:cf:97:fb:08:47:8b:d7:7d:3c:77:57:c0:
3b:62:9c:bf:57:f2:78:ca:cb:67:a3:af:e9:86:d8:c3:6a:f8:
d1:5c:e0:72:cc:cd:c1:94:e8:7a:af:c2:a7:b2:8e:28:2e:c9:
6f:63:00:ca:07:5a:22:35:4a:d8:82:ba:a1:d1:08:0c:70:0d:
c4:7c:62:a2:3f:1c:3e:0d:16:db:0f:e4:bc:7a:88:c6:d6:d7:
49:08:76:3c:9b:6e:33:af:39:ae:09:74:e0:df:10:49:44:f9:
63:79:0f:52:8d:82:fa:1c:cb:9c:42:3c:31:5c:9d:2c:9b:25:
d9:48:9e:84:88:10:ec:47:c9:c9:c3:a5:8a:9e:e5:7e:53:30:
e7:9f:af:0f:12:a0:ca:ba:a0:8c:b3:26:80:ce:d6:59:df:72:
e5:9d:29:af:2b:82:f2:5d:4c:ff:01:b5:80:9b:b9:81:a7:68:
7d:3a:3c:39:9d:28:d4:4d:05:0b:fe:23:85:7f:1c:0f:c0:08:
f5:3c:b1:cb:3c:dc:77:28:a1:d1:4d:e7:71:86:a9:a7:6e:93:
54:2d:8b:88:3b:15:39:3b:57:08:48:ce:5a:ec:a1:68:a4:cf:
94:57:f6:28:42:0f:54:e0:22:e9:0f:2d:4b:4d:de:80:95:5b:
d7:fa:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:38 2025 by rpki-client